---
title: "Spain — Data Subject Rights | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/spain/data-subject-rights/
source_html: /jurisdictions/spain/data-subject-rights/index.html
description: "Spain — Data Subject Rights: data_subject_rights Data Subject Rights 5 sub-modules 1 claim Green ▾ # Full GDPR rights catalogue in force; AEPD publishes accessible guidance confirming scope, including minors'"
generated_at: 2026-10-25T04:46:50Z
content_sha256: 98b9dc106bf0bcb544fe14a4a991ade238685b58651c251f4f3f6da6b6d8d5ac
generator: "fe-fleet/md-twin@1.0"
---
# Spain — Data Subject Rights | Data Protection Monitor

### D3Data Subject Rights5 sub-modules1 claimGreen▾#

Full GDPR rights catalogue in force; AEPD publishes accessible guidance confirming scope, including minors' rights from age 14.

Primary framework GDPR Arts 12-22 + LOPDGDD Arts 12-18

Supervisory authority [Agencia Española de Protección de Datos (AEPD)](https://www.aepd.es)

Traffic-light rationale — Green Full GDPR rights catalogue in force; AEPD publishes accessible guidance confirming scope, including minors' rights from age 14.

#### Sub-modules (5)

#### Access RightGreen

Right of access under GDPR Art 15 applies; AEPD confirms minors over 14 may exercise it themselves.

Claims (1):

- GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

#### Rectification And ErasureGreen

Rights of rectification and erasure (Arts 16-17) form part of the standard rights catalogue confirmed by AEPD.

Claims (1):

- GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

#### Restriction And ObjectionGreen

Rights to restriction of processing and objection, including objection to automated decision-making/profiling, are confirmed in AEPD's minors-and-education guidance as part of the exercisable rights catalogue.

Claims (1):

- GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

#### Data PortabilityGreen

Portability right (Art 20) is included among the rights AEPD confirms as exercisable, including by minors from age 14.

Claims (1):

- GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

#### Deadlines And Response WindowsAmber

No ES-specific deviation from the GDPR Art 12(3) one-month (extendable to three) response window was located in this research pass; GDPR default applies directly.

Absence provenance: unavailable . Searched: AEPD plazo respuesta derechos RGPD un mes.

Category narrative 34 words

GDPR Arts 15-22 rights (access, rectification, erasure, restriction, objection, portability, and objection to automated decision-making/profiling) apply directly in Spain and are reiterated in AEPD consumer-facing guidance, including specifically in the context of minors' data.

no periodic updates on record for this sub-brief

Evidence 1

Sources and claims (1)
- Confirmed[Agencia Española de Protección de Datos](https://www.aepd.es/preguntas-frecuentes/10-menores-y-educacion) — GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.observed 2026-08-03